Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa
File: 3139342e3131332e36342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: cnGS+4zetUxkx1FyDGFpqndUOVF7YMMBkuVy9CHLq10=
Subject key identifier: E7:63:D4:D8:29:6E:5B:76:0B:53:B3:A8:88:28:9C:E0:10:B5:3D:CB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7361FDB7BEA0B67C9EDA6B9850404637625FB670
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 47583
IP address blocks: 194.113.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:61:fd:b7:be:a0:b6:7c:9e:da:6b:98:50:40:46:37:62:5f:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=E763D4D8296E5B760B53B3A888289CE010B53DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:fd:82:3f:61:2b:c9:a0:b4:b9:05:65:5a:
4a:2f:f0:42:1b:a2:c6:e5:4f:27:d8:bc:5a:e2:5e:
5f:93:ae:6b:c6:32:4d:0d:d8:7e:44:6b:6c:dd:e8:
0d:3a:d6:14:64:db:f9:ce:53:d3:2d:39:f0:fc:83:
16:0f:0f:48:61:e7:0c:60:7f:48:ac:8b:6a:39:48:
a3:65:55:27:e0:10:c9:b7:86:3a:9b:80:56:f8:c9:
2f:63:b5:7d:39:0c:59:74:3f:28:ab:a2:c8:70:1e:
97:e0:02:5b:43:45:ba:fb:d1:a4:e6:25:25:fb:1d:
01:36:e1:92:85:9b:00:b3:ca:9c:2d:bf:12:fe:25:
1f:07:27:62:2e:50:c0:99:7a:c1:3f:03:be:1f:be:
aa:aa:d1:dd:ae:f7:76:b2:0c:f8:09:70:41:07:27:
8e:cd:0b:1e:77:0c:bf:e7:b0:a7:5e:86:a2:a1:73:
a5:7f:28:3d:11:9e:1b:b1:f1:6d:8e:bd:31:34:76:
13:66:eb:55:4d:c1:08:0e:c3:92:f1:55:41:72:e1:
ec:b3:3c:ef:e8:d2:dc:9d:ad:db:d5:f1:23:66:1d:
71:a8:af:d5:35:77:1c:c0:f8:cf:f5:ea:8e:07:61:
f9:08:61:5f:39:73:af:12:ee:eb:66:15:f6:db:42:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:D4:D8:29:6E:5B:76:0B:53:B3:A8:88:28:9C:E0:10:B5:3D:CB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8a:f4:43:59:e1:a2:25:0e:c9:0c:b8:b7:a1:da:df:14:bc:
db:50:8b:19:3a:6f:6a:2b:fb:dd:52:e2:14:66:05:c3:70:43:
6a:8e:df:4e:c7:f8:54:73:be:eb:97:fb:ee:d6:06:ee:19:54:
d5:8e:37:81:5d:77:62:27:b0:c8:4b:a3:96:e8:67:f8:c2:76:
6f:32:15:31:ef:67:12:2d:76:02:7e:8f:3f:ab:12:18:65:8b:
7e:47:77:62:f4:92:e7:52:1b:7e:7d:a2:aa:77:22:48:09:3c:
62:cd:aa:c6:b2:d9:14:29:1a:bb:74:44:86:1e:ae:3a:76:43:
6a:d1:85:a8:7c:ee:6c:59:be:43:64:2f:ea:46:44:04:9c:98:
e7:47:09:81:ff:56:55:aa:89:5e:07:ae:0f:40:ab:ba:66:b5:
cb:c8:81:00:ca:8a:2e:33:7f:9f:70:a2:7a:9e:df:d1:fe:b9:
f9:43:a1:11:f7:2b:5b:1d:e9:aa:c3:0d:db:14:60:85:00:08:
98:b6:4b:d5:bd:30:54:84:97:5e:a2:15:32:92:59:aa:08:e2:
0f:9c:c4:b3:96:c0:1d:b6:1c:a3:5c:ef:e5:9c:c1:02:00:60:
2c:78:61:67:49:72:98:ef:a3:d8:ba:cd:81:4f:79:d7:2a:50:
8a:34:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:31:24 2025 by rpki-client